# open-code-review mit Homebrew, MacPorts, winget installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für open-code-review in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:open-code-review ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install open-code-review ``` Evidenz: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install open-code-review ``` Evidenz: MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Windows - winget (92%): ```sh winget install --id Alibaba.OpenCodeReview -e ``` Evidenz: Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix ## Paketfakten - **Paketschlüssel:** brew:open-code-review - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 1.13.4 - **Quellzusammenfassung:** AI-powered code review tool with deterministic pipelines and an LLM agent - **Homepage:** - **Repository:** - **Upstream-Dokumentation:** - **Lizenz:** Apache-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-11-03T19:00:00Z - **Generiert:** 2026-11-04T12:20:42+00:00 ## Executables - ocr (cli) - ocr (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_golden_gate, arm64_linux, arm64_sequoia, arm64_tahoe, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-11-04 - Manager-Version: 1.13.4 - Manager aktualisiert: 2026-11-03 - lokale Daten: OK - Upstream-Repository: https://github.com/alibaba/open-code-review - neueste erkannte Version: v1.13.5 (aktuell) ## Projektgeschichte und Nutzung Open Code Review is Alibaba’s open-source AI-assisted code-review CLI. It reviews Git diffs or complete files and emits structured, line-level findings using deterministic pipelines and an LLM agent. ### Projektgeschichte Open Code Review originated as Alibaba Group’s internal AI code-review assistant. Following two years of internal deployment, Alibaba incubated it as an open-source project. The public project centers on a hybrid architecture: deterministic pipelines control coverage, bundling, rule selection, and comment positioning, while an LLM agent retrieves context and writes review findings. ### Adoptionsgeschichte Alibaba states that the tool served tens of thousands of internal developers and identified millions of defects over two years before being released as an open-source project. The public CLI is distributed through npm, downloadable binaries, source builds, and Homebrew. The project also provides integrations for coding-agent skills, Claude Code plugins, GitHub Actions, and GitLab CI, extending it beyond interactive local reviews. ### Wie es verwendet wird Users configure an LLM endpoint, authentication token, and model, test connectivity with ocr llm test, then run ocr review against workspace changes, commit ranges, or individual commits. The ocr scan command audits complete files or directories. Configuration is stored in ~/.opencodereview/config.json. LLM credentials may instead be supplied through OCR-prefixed or compatible Anthropic environment variables; because no distinct credential file is documented, the credentials-file field is null. ### Warum Paket-Nerds sich dafür interessieren Open Code Review packages an internally developed, large-scale review system as a portable Go CLI. It combines deterministic file selection and rule matching with LLM-driven contextual analysis rather than relying on an unconstrained general-purpose agent. Its multiple distribution and integration surfaces—native binaries, npm, Homebrew, CI, skills, and plugins—make it representative of the emerging AI developer-tool supply chain. ### Zeitleiste - Internal era: Deployed within Alibaba for two years before open-source incubation. - Open-source era: Released publicly with CLI, agent, plugin, skill, and CI integration surfaces. ### Related projects - Related systems include Git, GitHub Actions, GitLab CI, Claude Code skills and plugins, OpenAI-compatible APIs, and Anthropic-compatible APIs. ### Quellen - - ## Sicherheitshinweise Für open-code-review wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.opencodereview/config.json ## Credential files - Unix: ~/.opencodereview/config.json ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** open-code-review - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - MacPorts - open-code-review: normalized package name match | MacPorts ports tree: llm/open-code-review/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - winget - Alibaba.OpenCodeReview: normalized package name match | Windows Package Manager source index: Alibaba.OpenCodeReview from https://cdn.winget.microsoft.com/cache/source.msix ## Verwandte Links - [AI and agent packages](https://pkg.so/de/ai-agent-tools/) - Matched AI model, agent, coding-agent, orchestration, or MCP metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [coderabbit](https://pkg.so/de/cask/coderabbit/) - Choose CodeRabbit CLI when you prefer a hosted AI-review product with GitHub and GitLab pull-request integration and repository-local YAML policy, rather than Open Code Review's self-selected LLM providers and deterministic local pipeline. Quellen: · · ## Combined YAML source View the package source record on GitHub. [combined/open-code-review.yml](https://github.com/mxcl/pkgdb/blob/main/combined/open-code-review.yml) ## Quellen - pkg.so package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - package relationship graph - external package-manager database matches - cross-ecosystem install command graph